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Abstract 

Modeling and reasoning about concurrent quantum systems is very important both for dis- 
tributed quantum computing and for quantum protocol verification. As a consequence, a general 
framework describing formally the communication and concurrency in complex quantum sys- 
tems is necessary. For this purpose, we propose a model qCCS which is a natural quantum 
extension of classical value-passing CCS with the input and output of quantum states, and 
unitary transformations and measurements on quantum systems. The operational semantics 
of qCCS is given based on probabilistic labeled transition system. This semantics has many 
different features compared with the proposals in literature in order to describe input and out- 
put of quantum systems which are possibly correlated with other components. Based on this 
operational semantics, we introduce the notions of strong probabilistic bisimilarity and weak 
probabilistic bisimilarity between quantum processes and discuss some properties of them, such 
as congruence under various combinators. 

1 Introduction 

An important research field in computer science is modeling and reasoning about concurrent systems, 
especially when computations are performed by physically separated parties. In classical world, 
various theories of concurrent computation have been proposed, including Petri nets [28], CSP 
[18, 19], CCS [24, 25] and ACP [5], among which CCS is one of the most mathematically developed 
models. The simplest version of CCS is so-called pure CCS in which no data are involved when 
performing actions, and the only form of communication between different components is just pure 
synchronization. Value-passing CCS is a natural extension of pure CCS where processes can not only 
synchronize with each other but also transfer data between them during synchronization [15, 16, 17]. 

Quantum computation and quantum information theory (QCQI) has attracted considerable re- 
search efforts in the past twenty years since Feynman [10] proposed the idea that a quantum mechan- 
ical system can be used to perform computation. Benefiting from the possibility of superposition 
of different basis states and the linearity of quantum operations, quantum computing may provide 
considerable speedup over its classical analogue [35, 13, 14]. However, the design of quantum algo- 
rithms is too tricky and there does not yet seem to be a unifying set of principles by which quantum 
algorithms can be developed. To deal with this difficulty, quantum programming languages are 
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developed which identify and promote useful "high-level" features allowing us to think about a 
problem in a conceptual way, rather than focusing on the details of its "low-level" implementations 
[27, 30, 6, 34]. 

The languages presented so far are, however, mostly designed for sequential quantum computing, 
where no communications between physically separated parties are considered. Investigation of lan- 
guages which can describe quantum concurrent systems and the communication behaviors between 
them has just begun. On the other hand, constructing real quantum computers in which quantum 
programming can be applied is very difficult; while quantum cryptography [7, 2, 1], which can pro- 
vide absolutely security in principle even attacked by potential quantum eavesdropper, has grown 
so rapidly that recently quantum cryptographic systems have been commercially available [29] . So 
to some extent the need for a language describing concurrent systems is more urgent than that for 
sequential computation. Furthermore, a framework of modeling and reasoning about quantum con- 
current systems will also provide techniques to prove the properties such as correctness and security 
of quantum cryptographic protocols, just as we see in classical world. 

The first steps of constructing such a general framework for modeling quantum concurrent sys- 
tems were made independently by Jorrand and Lalire [20], and Gay and Nagarajan [11]. In Rcf.[20], 
a process algebra for quantum processes was proposed which can describe both classical and quan- 
tum information passing and processing. Later on, Lalire presented for their language a probabilistic 
branching bisimulation which identifies quantum processes associated with process §r< iphs having 
the same branching structure [21]. But further properties such as congruence under various combina- 
tions of quantum processes were not explored. In Ref.[ll], a language called CQP (Communicating 
Quantum Processes) was defined, which combined the communication primitives of pi-calculus with 
primitives for measurement and transformation of quantum states. One distinctive feature of CQP is 
a type system which can guarantee the physical realizability of quantum processes in CQP. However, 
no equivalence notions between processes were presented there. 

The purpose of this paper is to propose a different model for quantum concurrent systems and 
discuss its properties. This model (we call it qCCS) is a quantum extension of classical value-passing 
CCS. To avoid no-go operations such as quantum cloning in syntactical level, we explicitly introduce 
the notion of free quantum variables, which intuitively denote the quantum systems a process can 
reference. When constructing more complicated processes from simpler ones, this type of variables 
must be taken into consideration. For example, if q is one of the free quantum variables of E then 
the expression dq.E is invalid because we can not reference a quantum system when it has been 
output. This is in sharp contrast with classical variables, because the value of classical values can be 
copied arbitrarily so that we can use the variable even after it has been output. As a consequence, 
the syntax of qCCS is more complicated compared with those in [11] and [20]. But the reward is 
that a type system as introduced in [11] is not necessary in qCCS. Note also that in [20], there was 
not such a mechanics to avoid invalid quantum processes. 

To present the operational semantics of qCCS, we introduce the notion of configuration which is 
a pair consisting of a quantum process and an accompanied context instantiating all free quantum 
variables of the process. Intuitively, the context describes the environment the process is performed 
in. The operational semantics of qCCS is then given based on probabilistic labeled transition system 
consisting of configurations. There are some differences between our approach and the previous ones 
presented in literature. The first one is that in our semantics, transitions are of only one kind, and 
defined from configurations to distributions over configurations, i.e. 

->C Con x Act x V(Con) 

where Con is the set of configurations and T>(Con) is the set of finite-support distributions on Con. 
Notice that in [20] and [11], in order to resolve probabilistic choice after measurements have been 
performed, another kind of transitions, i.e. probabilistic transitions, were introduced; while here 
in the current paper, we do not resolve any probabilistic choices in intermediate steps and instead 
keep the probability information all the time. To achieve this, we extend the ordinary transitions 
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defined from configurations to distributions to those defined between configurations. The motivation 
for us to make such a design decision is as follows. First, transitions defined in this way make 
our operational semantics simple and more CCS-like; second, a single transition in our qCCS can 
describe simultaneously different probabilistic execution paths with the same action and the same 
starting and ending configurations. As a consequence, the definition of weak transitions, which is the 
basis of weak probabilistic bisimulation, becomes possible. Furthermore, by defining transitions in 
this way, the notions and techniques introduced in [32] and [33] for classical probabilistic processes 
can be extended to investigate the properties of weak probabilistic bisimulations between quantum 
processes. 

The second difference between our approach of semantics and the previous ones is the way of 
dealing with rules of quantum input, quantum output and quantum communication. In Ref.[20], 
the rule for quantum input was of the following form (rewritten with our notations) 

< clq.E; q = a > c —>< E[r/q];r, q = p ® a > for all 2 x 2 density matrix p and r £ q. 

This rule makes sense when the input system (denoted by the quantum variable r) is initially not 
correlated (neither entangled nor classically correlated) with the quantum systems in q. However, we 
know that one of the essential difference between quantum mechanics and classical correspondence 
is that in the former, different systems can lie in an entangled states which can not be determined 
by the reduced states of each individual system. Motivated by this observation, we present two rules 
considering different situations when quantum states are input. The first rule aims at the case when 
the system to be input is not in current quantum context: 

< clq.E; q = a > c -^ < E[r/q];r, q = p > where r $ q and Tr r p = a. 

In this case, the accompanied context is extended to include the newly input system. Note that in 
our rule, any quantum input can be characterized since we put no constraints on the form of the 
new state p except Tr r p = a which means that the state of initial systems will not be changed. The 
second rule aims at the case when the system to be input is already in current quantum context: 

< clq.E; q = a > c 5 < E[r/q];q = a > where r e q - (qv(E) - {q}). 

Note that the context keeps unchanged after the transition. The intuition behind this rule is that 
when the system to be input has already been described in the current context, input action is 
nothing but a declaration that the process can reference this system, which of course does not affect 
the state of the whole system. 

The output rule for quantum system presented in [20] was of the following form 

< clq.E; q = <7> C -H<E;q-{q} = Tr {q} a > 

with the intuition that we do not care about the state of a quantum system when it has been output. 
But it is easy to see that the information about how the output system is correlated with the systems 
remained in the context is totally lost; problems will arise if we input again the system which was 
just output. To deal with this shortcoming, we present the quantum output rule as 

< clq.E; q = a >^ < E;q = a >. 

As a result, the quantum communication rule in our qCCS has a very simple and CCS-like form 

<E 1 ;C > c ^ <E[;C>, < E 2 ;C> C -^ < E' 2 ;C> 

< £i||£ 2 ; C >^ < E[\\E' 2 ; C > 
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In Ref.[ll], no rules for quantum input and output were introduced because the authors took the 
viewpoint that any input action is necessarily accompanied with an output action (no matter from 
another process or the environment). However, we still think it necessary to present rules considering 
input and output actions, since they give us a compositional way to describe quantum communication 
between different components. 

Another contribution of the current paper is the notions of strong and weak probabilistic bisim- 
ilarities between quantum processes. As mentioned above, Lalire [21] has proposed a notion of 
probabilistic branching bisimulation without any further properties being explored. Our bisimu- 
lation, based on different labeled transition system, is motivated by [32] and [33] where classical 
probabilistic processes are considered. This notion of bisimilarity is different from classical non- 
probabilistic ones in two ways. First, for two bisimilar configurations, any action performed by one 
can be simulated by a combined action of the other. That is, different non-deterministic transitions 
can be chosen simultaneously with different probabilities to simulate a single one. Second, the fi- 
nal states of the quantum contexts when all matching actions have been performed must be the 
same when we want to check if two configurations are bisimilar. For example, the configurations 
< clO.nil; q = |0)(0| > and < c\0.nil;q = |1)(1| > should not be considered bisimilar although both 
of them can only perform the same action c!0 and then terminate. 

The notion of weak probabilistic bisimilarity which abstracts from internal actions is a distinc- 
tive feature of our qCCS. Note that in qCCS, transition from a configuration generally leads to a 
finite-support distribution over configurations; and from each resulted configuration, different con- 
figurations can again be derived with different probabilities. As a consequence, the execution of a 
sequence of actions from a quantum configuration typically form a tree rather than a linear path as 
in classical non-probabilistic case. When weak probabilistic bisimulations are considered, internal 
actions should be able to be arbitrarily inserted in or deleted from any branch of the tree. This 
arbitrariness makes the definition of weak transitions difficult. To deal with it, we first introduce 
the notion of adversary which, depending on the execution history, decides the next transition when 
nondctcrministic choices have to be made. Then a weak transition from a configuration to a dis- 
tribution is determined by an adversary with all the coinciding execution paths having the same 
sequence of observable actions. Based on weak transitions, we define weak probabilistic bisimilations 
between configurations and between quantum processes and discuss some properties of them such 
as congruence under various combinators in qCCS. 

1.1 Overview of this paper 

This paper is organized as follows: in Section 2, we give some preliminaries. In particular, we 
review some basic notions of quantum computing used in this paper, such as quantum state, unitary 
transformations, measurements, quantum entanglement, and density matrices. 

Section 3 is devoted to studying the syntax and operational semantics of qCCS. We first define 
inductively the syntax of quantum process expressions and at the same time the free quantum 
variables associated with each process expression. Then the notion of configuration is introduced to 
make process expressions closed with respect to quantum variables. The operational semantics of 
qCCS is then given in terms of probabilistic labeled transition system consisting of configurations. 
We also extend the ordinary transitions defined from configurations to distributions to those defined 
between distributions. The notion of combined transition, which is the combination of different 
ordinary transitions with the same action, is also introduced. 

In Section 4, we present an example to show the expressibility of our qCCS. Particularly, we 
describe the well-known quantum teleportation protocol with the language of qCCS and show that 
it indeed teleports any qubit from one party to another. 

Section 5 and Section 6 are the main part of the present paper. We define the notions of strong 
and weak probabilistic bisimilarities between quantum processes by first introducing corresponding 
bisimilarities between configurations. Some properties of these two bisimilarities are also derived. 
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Particularly, we show that strong/weak probabilistic bisimilarity between quantum configurations 
is the largest strong/weak probabilistic bisimulation on Con; a weak version of congruence property 
is also proved in which bisimilarity is preserved by parallel combinator when the common process is 
classical. The inherent non-commutativity of quantum operations and the potential entanglement 
between quantum systems make the general case very hard to prove and we put it aside for future 
investigation. 

Section 7 is the concluding section in which we outline the main results of the present paper and 
point out some problems for further study. 

2 Preliminary 

In this section, we review some basic notations and concepts in quantum computation used in this 
paper. For a detailed survey, we refer to [26]. 

One of the most fundamental notions of quantum computation is Hilbert space. In finite dimen- 
sional case, a Hilbert space is just a vector space equipped with an inner product. So there exists a 
natural isomorphism between a Hilbert space and a complex vector space with the same dimension. 
According to the basic principles of quantum mechanics, the state of a quantum system can be 
characterized by a unit vector in some Hilbert space. For example, in a two-level quantum system 
(i.e., the associated Hilbert space is two-dimensional. Such a system is usually called a 'qubit', the 
quantum analogue of 'bit' in classical computation), a general state can be described by a complex 
vector 

G C 2 (1) 

where aa* + (3 [3* — 1. An alternative but more frequently used notation for the qubit presented in 
Eq.(l) is a\0) + /3\1), where |0) and |1) denote the two basis states respectively and |-), called 'kef, 
indicates that it is a quantum state. 

The evolution of a closed quantum system is described by a unitary transformation on the 
associated Hilbert space. To be specific, let a quantum system be in a state | -01 } at time t\. Then 
the state l^) at time t<i is related to |V>i) by a unitary operator U which depends only on the times 
t\ and t 2 , that is, 

\H = u\^i). 

Observation of a quantum system is a quantum measurement represented by a Hermitian operator 
M on the associated Hilbert space of the system. Suppose M has a spectral decomposition 

M = ^mP m , (2) 

m 

where P m is the projector onto the eigenspace of M with eigenvalue m. Then the probability of 
getting result m when the system is initially in the state \tp) is p(m) = (tp\P m \ip} and the post- 
measurement state of the system given the outcome m becomes P m \il>) / V 'p(m) . 

The state space of a composite system (for example, a quantum system consisting of many qubits) 
is the tensor product of the state spaces of its component systems. To be specific, a system consisting 
of n qubits has a 2"-dimensional state space with basis states {|0) <£> • • • <£> |0), . . . , |1) <£> • • • ® |1)}. 
We often simply write |0)|0) . . . |0) or even |00 . . . 0) for abbreviations of |0) <g> • • • <g> |0), and so on. 
Note that in general, the state of a composite system cannot be decomposed into tensor product of 
the states of its component systems. A well-known example is the so-called EPR state 

^(|00> + |11» 

in 2-qubit system. This kind of states are called entangled states and the phenomenon is called 
entanglement. Mathematically speaking, entanglement illustrates the key difference between tensor 
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product in quantum systems and Cartesian product in classical systems. To see the power of 
entanglement, let us consider a measurement M = 0|0)(0| + 1|1)(1| applied on the first qubit of 
EPR state. If the result is then we can definitely say that after the measurement, the second 
qubit collapses into state |0). In any sequential measurement M applied on the second state, the 
result is definitely 0, in contract with the fact that originally it should yield and 1 with respective 
probabilities one half. In other words, the measurement on the first qubit changes in a way the 
state of the second qubit, no matter how far away these two qubits are from each other. This is an 
outstanding property of quantum mechanics which has no correspondence in classical world, and is 
the source of many strange quantum phenomena such as teleportation [3] and superdense coding [4] . 

A more powerful notation to describe quantum system is density matrix (or density operator), 
especially when the state of the system we are concerned with is not completely known. This arises 
when the system has been interacted with a noisy environment or it is only a part of a larger system. 
In this setting, the state of a quantum system is represented by a density matrix, i.e., a positive 
semi-definite matrix with trace 1 on the associated Hilbert space. The unitary transformation U 
applied on the system has the effect p — ► U pU\ where W denotes the adjoint of U. A quantum 
measurement in Eq.(2) on an initial state p will get result m with probability Tr(P m p) and when 
the result m occurs, the post-measurement state of the system is P m pP m /Tr{P m p). 

3 Syntax and semantics of qCCS 

For the sake of simplicity, we consider only two types of data, the set of real numbers Real for classical 
information and the set of qubits Qbt for quantum information. We denote by cVar (ranged over 
by x, y, ... ) and qVar (ranged over by q, r, ... ) the set of classical variables on Real and quantum 
variables on Qbt respectively. The set of expressions with the value domain Real is denoted by Exp 
and ranged over by e. Let cChan be the set of classical channel names, ranged over by c, d, . . . , and 
qChan the set of quantum channel names, ranged over by c, d, . . . . Denote Chan = cChan^SqChan. 
A relabeling function / is a function from Chan to Chan such that / \ cChan C cChan while 
/ \ qChan C qChan. 

From these notations, we now propose the syntax of qCCS. For simplicity, we often abbreviate 
ordered set {qi, . . . , q n } to q when q\, . . . , q n arc distinct quantum variables and the dimension n is 
understood. 

Definition 3.1 (quantum process expression) The set of quantum process expressions qPrE and 
the free quantum variable function qv : qPrE — > 2 qVar are defined inductively as follows, where 
E, F G qPrE, c G cChan, x, y G cVar, c G qChan, q,qi, . . . , q n G qVar, e G Exp, f is a relabeling 
function, L C Chan, b is a boolean- valued expression, U is a unitary matrix, and M is a Hermitian 
matrix. 

1. nil G qPrE, and gw(nil) = 0; 

2. clx.E G qPrE, and qv(c?x.E) = qv(E); 

3. cle.E G qPrE, and qv(cle.E) = qv(E): 

4. (qbit q).E G qPrE, and qv((qb\t q).E) = qv(E) - {q}; 

5. clq.E G qPrE, and qv{c!q.E) = qv(E) - {q}; 

6. If q & qv(E) then dq.E G qPrE, and qv(dq.E) = qv(E) l±l {q}; 

7. U[q].E G qPrE, and qv(U[q].E) = qv(E) U q; 

8. M[q;x].E eqPrE, and qv(M[q; x).E) =qv(E)Uq; 
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9. E + F £ qPrE, and qv(E + F) = qv(E) U qv(F); 

10. If qv(E) n qv(F) = then E\\F £ qPrE, and qv(E\\F) = qv(E) W qv(F); 

11. £[/] e <?Pr£, and gv(£7[/]) = gv(£7); 

12. £\L e <7-Pr£, and qv(E\L) = qv(E); 

13. (if 6 then £) e gPrE, and qv(if b then E 1 ) = qv(E); 

14. qPrE is the smallest set satisfying 1-13. 

Intuitively, for any quantum process expression E, qv(E) denotes the set of quantum variables 
E can reference. Note that in c\q.E, the assumption q ^ qv{E) guarantees that a quantum system 
will never be referenced after it has been output. This is a requirement of the quantum no-cloning 
theorem. For the same reason, we assume q\,...,q n distinct in U[q].E and M[q;x].E (Recall that 
the denotation q implies qi,...,q n are distinct). Furthermore, since we intend to use the parallel 
combinator || to model separate parties which can perform actions locally on their own systems and 
communicate with each other through channels, the assumption qv(E) n qv(F) = guarantees that 
E and F will never reference a quantum system synchronously. 

We do not allow process variables and recursion in our language of quantum process expressions. 
Allowing them needs careful consideration of free quantum variables and we set it aside for further 
study. 

The notion of free classical variables in quantum process expressions is as usual (only classical 
input prefix clx and measurement M[q; x] have binding power on a;). A quantum process expression 
E is called a quantum process if it contains no free classical variables, i.e., fv(E) = 0. The set of 
quantum processes is denoted by qProc and ranged over by P, Q . . . . 

Note that for any E £ qPrE with fv(E) C {xi, . . . , x n } and indexed set v — {v\, . . . , v n } of real 
values, the expression E\v/x] obtained by instantiating classical variables x with v is a quantum 
process. The following definition introduces a corresponding instantiation for free quantum variables. 
Similar notions were also proposed in [20] and [11] in somewhat different way. 

Definition 3.2 (Configuration) For any process expression E £ qPrE, if qv(E) C q then the pair 

<E;q = p> (3) 

is called a configuration, where p is a density matrix in 2™ -dimensional Hilbert space and n is the 
length ofq. The set of configurations is denoted by Con and ranged over by C,T>, . . . . In configuration 
C =< E;q = p>,q = pis called the quantum context of C and denoted by Context(C). 

Let D(Con) be the set of finite-support distributions over Con, i.e. 

D(Con) = {p : Con -» [0, 1] | p(C) > for finitely many C, and ^ M C ) = 1 }- 

M(C)>0 

For any p £ D(Con), we denote by Supp(p) the support set of p, i.e. the set of configurations C 
such that p(C) > 0. When p is a simple distribution such that Supp(p) = {C} for some C, we briefly 
denote p = C. Just as in [20] and [11], sometimes we find it convenient to denote a distribution 
p £ D(Con) by an explicit form p = Si € ipi»d (or p = Spi»d when the index set I is understood) 
where Supp(p) = {Ci | i £ 1} and p{Ci) — pi. Given p\, . . . ,p n £ D{Con) and p\, . . . ,p n £ (0, 1], 
J2iPi = 1) we define the combined distribution, denoted by ~Y^ = iPiPi, to be a new p £ D{Con) 
such that 

(1) Supp(p) = U" = i Supp(pi), 

(2) for any V £ Supp(p), p(V) = J2 i p i p i (T>). 
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As usual, the operational semantics of our qCCS is based on probabilistic labeled transition 
system. Let 

Act = {civ, civ} U {c?r, c!r} U {r} 

where c and c are respectively classical and quantum channels, v € Real, r € qVar, and r is the silent 
action. Then the semantics is given by the probabilistic labeled transition system (Con, Act, — »), 
where — »C Con x Act x V(Con) is the smallest relation satisfying the rules defined in the following 
definitions (For brevity, we write C \i instead of (C, a, p) G— >). 

Definition 3.3 (Classical rules) 

C-Inp : r. for all v € Real 

< clx.E;C>-^ < E[v/x];C> 

C-Outp : j , where v = [e] 

< c\e.E;C> c -l < E;C> 

c Com . <E i; C> c ^ <E[;C>, <E 2 ;C> C ^<E' 2 ;C> 
< E 1 \\E 2 ;C>^ < E[\\E' 2 ;C> 

< Ei,C >^ < E[;C >, < E 2 ;C>^ < E' 2 ;C> 

<E 1 \\E 2 ;C>l*<E' 1 \\E! l ;C> 

These three rules describe the passing of classical messages; they are almost the same as in 
classical process algebra. Note that the input and output of classical messages do not change the 
context since contexts include only current states of the accompanied quantum systems. In our 
notion of configurations, classical data are encoded in the structure of quantum processes, just as in 
classical process algebra; while quantum data are explicitly described in quantum contexts. 

Definition 3.4 Q-New (Quantum-new rule) 

where r 4. q 

< (qbit q).E; q = p>^< E[r/q];r, q = |0) (0| ® p > 

This rule creates a new qubit and initializes it to the standard state |0)(0|. 

Definition 3.5 Q-Inp (Quantum-input rule) 

T) where r 4. q and Tr r cr = p 

< clq.E; q = p >^ < E[r/q] ;r,q = a > 

— r — — where rEq- (qv(E) - {q}) 

< clq.E; q = p>^ < E[r/q];q = p> 

The first rule characterizes the situation when a qubit not originally in the context is input; 
while the second rule deals with the case when the qubit to be input is already in the context. As 
explained in the Introduction section, this two rules together describe all possible input behaviors 
for a quantum process. 

Definition 3.6 Q-Outp (Quantum-output rule) 

< clq.E; q = p >^ < E;q = p> 

Since the definition of configuration guarantees that q € q, we do not specify this in the side- 
condition. 
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Definition 3.7 Unit (Unitary transformation rule) 



< U[f].E; q = p>^> < E;q = U F pU} > 



where UfpU f denotes the application of unitary transformation U on the system consisting of f. To 
be specific, let length(f) = k and length(q) = n. Then U f = Tl\.(U <g> /®("~' c) )n fi where 11^ is the 
permutation transformation which places n , . . . , at the head of q. Similar notations were also 
introduced in [20]. 

In our framework of qCCS, unitary transformations are considered internal actions performed by 
individual systems. As a consequence, they are unobservable from outside and performing a unitary 
transformation is modeled by a r-action. Similar treatment is applied to measurement on quantum 
systems. 

Definition 3.8 Meas (Measurement rule) 

< M[f;x].E;q = p >^> S Pl » < E[\i/x];q = Pi,fpPi,f/Pi > 

where M is a Hcrmitian matrix with spectral decomposition M = J2 i AjPj, P^f denotes the projec- 
tion Pi performed on the system consisting of f , i.e., Pj if = Ill(Pi <8> i"®( n-fe ))n f , and Pi — Tr(Pi^p). 

Intuitively, after measurement the configuration will evolve into different configurations with 
corresponding probabilities depending on different measurement outcomes. 

Definition 3.9 Q-Com (Quantum-communication rule) 



It may be surprising at first glance that the quantum context remains unchanged during the 
process of quantum communication. The reason is that by rules Q-Inp and Q-Outp, contexts here 
already contain all input/ouput qubits. 

Definition 3.10 (Interleaving rules) 



<E 1 -C>^< E[-C>, < E 2 ;C >^ < E' 2 ;C> 
< E 1 \\E 2 ;C>^ < E[\\E' 2 ;C> 



<E 1 ;C>^<E[;C>, < E 2 ;C >^ < E' 2 ;C> 
< Ei\\E 2 ;C>^ < E[\\E 2 ;C> 



Inp-Int : 



<E 1 -C>-1< E\;C> 



where r ^ qv{E 2 ) 



< Ei 1 1 E 2 ; C > — > < E'i 1 1 E 2 ; C' > 



< ff 2 ;C> c -4< E' 2 ;C > 



where r £ qv(Ei) 



<Ei\\E 2 -C>^< Ei\\E' 2 ;C"> 



Oth-Int : 



< Ei;C>^ m Pl » < E\;Cj > 



where a £ {c?r} 



< Ei\\E 2 ;C>^> fflp,. < E{\\E 2 -Ci > 



< E 2 -C>^ m Pl m < Ei;d > 



where a £ {c?r} 



< Ei\\E 2 ;C>^ m Pl * < Ei\\E l 2 ;d > 
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It is worth noting that when one component of a composite system attempts to input a quantum 
system, the system should not be referenced by another component. This is the reason we present 
the Inp-Int Rule here. 

The following rules are similar to their classical correspondences. 

Definition 3.11 Sum (Summation rule) 

<E;C>^u <F;C>^n 
<E + F;C>2*it < E + F;C>-^ n 



Definition 3.12 Rel (Relabeling rule) 

< E;C >A mpi* < Ei-d > 



<E[f];C> a M ] m Pl . <Ei[f] ;C l > 



Here we have extended the definition of relabeling function to quantum process expressions and 
actions in an obvious way. 



Definition 3.13 Res (Restriction rule) 

<E;C>^m Pi »<E i ;C i > 



where cn(a) £ L 



< E\L; C >A mpi» < Ei\L; C t > 
Here the function cn returns the channel name used by an action. 
Definition 3.14 Cho (Choice rule) 

< E;C>^n 



< if b then £; C > A a 



where \\b\\ = true 



Before concluding this section, we give two extensions of the ordinary transition relation. First 
we define transitions between distributions on Con as follows. Given fi, v G D(Con) and a G Act, 
we write n A v if for any C G Supp(fi), there exists a transition C A \i c and 

cesuppin) 

For an action string s = cti . . . a n , we write u v or u— » ... ^3 i/ if there exist (i n -i such 

that \i — > m , . . . , Hn-i — » v. 

Second, we extend the ordinary transitions to combined transitions. Suppose C G Con, a G Act, 
and a G D(Con). We say that C can evolve into fj, by an a-combined transition, denoted by 
C A c u, if there exist u\, . . . , fi n G D(Con) andpi, . . . ,p n G (0, 1], J2iPi = 1> sucn tnat C ~* u i an d 
u = YliPi^i- The set of combined transitions is denoted by — >c, that is 

->c'-= {(C,a,u) : C A c u }. 
Combined transitions can also be extended to those between distributions in a similar way. 



10 



4 An example 

In this section, we give a simple example to show the expressibility of our qCCS. This example is 
concerned with quantum teleportation [3] , a famous protocol in quantum information theory which 
teleports an unknown quantum state by sending only classical information, provided that the sender 
and the receiver shared an entangled state in advance. This example was also considered in [20] and 
[11]. 

We first assume some predefined unitary transformations. The transformation CNOT performs 
on two qubits such that 

CNOT\00) = \00),CNOT\01) = \01},CNOT\10) = |11), O/V0T|ll) = |10). 

The 1-qubit Hadamard transformation H and Pauli transformations <jq , o~\ , a 2 , 03 arc defined re- 
spectively as follows: 

h= tX 1 -1 )' ao=I= { o 1 ) 
ai = ( 1 ) ' ° 2 = ( -1 ) ' CT3 = ( -i ) • 

We further assume the 2-qubit measurement M = X)^=o where i is the binary expansion of i. 

Then the participating quantum processes are defined as follows: 

Alice :— c?qi.CNot[q,qi].H[q].M[q,qi;x].clx.nil 

Bob := d? q 2 .c?x. a x [q 2 ]. nil 

EPR := (qbit <?i).(qbit q 2 ).H[q 1 }.CNOT[q 1 ,q 2 }.c\q 1 .d\q 2 . nil 

Telep := (EPR\\ Alice\\Bob)\{c, d, c} 

where we have adopted the obvious abbreviation 

Cx[?2]-nil = if x = then gq [q 2 ] .nil + if x = 1 then ai^l-nil + 
if x — 2 then (j 2 [q 2 ].n\l + if x = 3 then er 3 [<7 2 ].nil. 

Now we can show that the process Telep defined above can indeed teleport any qubit from Alice 
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to Bob. 



< Telep; q = [a\0] + (3\1)] > 

< ((H[q 1 ].CNOT[q u q 2 }x\q 1 .d\q 2 .nil)\\Alice\\Bob)\{c, d, c}; 

?2, Qi, Q = [|00> <g> (a|0) + /3|1))] > Q-New, Res 

< ((c!gi.d!g 2 .nn)pZice||Bo&)\{c,d,c}; 



g 2 ,gi,g = + I 11 )) ® ("1°) + Z 3 ! 1 ))] > 



Unit, Res 



< nil||C7Voi[g,gi]..£f[g].M[g, gi; 4c!z.nil||c?2;.cr a; [g 2 ].nil)\{c, d, c}; 



g 2 ,g l5 g = [-^=(|00) + |11)) ® (a|0) + > 
< nil||M[g, gi; a;].c!^nil||c?^o- x [g 2 ].nil)\{c, d, c}; 

92, gi, 9 - [^(a(|000) + |001) + |110) + |1H>) - 



Q-Com, Res 



< nil 



]-• < nil[ 

4 

< nill 

4 

]i. < nil| 

4 



• < nil| 

• < nil{ 

< nil| 

< nil! 



P(\0W) - |011) + 1 100) - |101)))] > Unit, Res 
c\0.nil\\c?x.a x [q 2 ].nil)\{c,d,c};q 2 , qi ,q = [a|000) + /3|100)] > 

c!l.nil||c?z.CT a [g 2 ].nn)\{c,d,c};g 2 ,gi,g = [a|110> + /3|010>] > 

c\2.nil\\c7x.a x [q 2 }.nil)\{c, d, c}; q 2 , gi, g = [a|001) - /3|101)] > 

c!3.nil||c?a:.<7s[g 2 ].nil)\{c, d, c}; g 2 , gi , g - Hill) - /3|011)] > 

Meas, Res 

nil||nil)\{c,d,c};g2,gi,«=[(a|0)+/9|l))®|00)] > 
nil||nil)\{c, d, c}; g 2 , g 1; g = [(a|0) + /3|1» ® |10>] > 
nil||nil)\{c, d, c}; g 2 , g 1; g = [(a|0) + ® |01)] > 



nil||nil)\{c, d, c}; g 2 , gi, g = [(a|' 



■/J|1»®|11>] > 

C-Com, Unit, Res 



Here for any pure state [\tp}] denotes the abbreviation of \4>){ip\. 



5 Strong probabilistic bisimilarity between quantum processes 

In this section, we introduce the idea of strong probabilistic bisimulation between quantum processes 
and prove some properties of strong probabilistic bisimilarity. 

Given an equivalence relation 1Z C Con x Con, two distributions u and v on Con are said 
to be equivalent under 1Z, denoted by fj, =iz v 1 if for any equivalence class M € Con/lZ it holds 
H(M) = v{M). We denote C if there exists no /i e D{Con) such that C u; and C if C -?> for 
any a £ Act. 

Definition 5.1 An equivalence relation 1Z C Con x Con is a strong probabilistic bisimulation if for 
any C,T> G Con, (C,T>) € 7?. implies that 
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(1) whenever C [i for some a e Act, there exists v such that V A c v and \i =-ji v, 

(2) ifC then Contex(C) = Contex(V). 

Here two quantum contexts q = p and r — a are said to be equal if there exists a permutation II 
such that H(q) — f and at the same time IIplT = a. 

Since the effect of unitary transformations and measurements the processes performed is re- 
flected by the state change of accompanied quantum contexts, when bisimulation between quantum 
configurations is investigated, not only the actions but also the final contexts must be taken into 
consideration. This is the reason why we include Clause (2) in the above definition. 

Example 5.1 Let M ,i = 0|0)(0| + 1|1)(1| be the measurement on qubit system according to com- 
putational basis, and |±) = (|0) ± |l))/\/2- Let U and V be unitary transformations such that 

U\+) = \0), U\-) = \l) and V\+) = \l), V\-) = \0). 

Suppose now 

C =< U[q].ni\ + V[q].ni\ + M ,i[g;x].nil;g = |+)(+| > 

and 

V=< U[q].ml + V[q].ml;q=\+)(+\ > . 

Then by our notion of strong probabilistic bisimulation, these two configurations are bisimilar since 
V can simulate the action M 0i i[g;a;] of C by choosing its actions U[q] and V[q] with respective 
probabilities one half. 

Definition 5.2 Two configurations C and V are strongly bisimilar, denoted by C ^ c T) , if there is 
a strong probabilistic bisimulation relation 1Z such that (C,T>) S 1Z. For any P,Q G qProc, P and 
Q are strongly bisimilar, denoted by P ~ p Q, if < P;C >^ c < Q;C > for any context C. Suppose 
process expressions E and F contain classical variables x at most. Then E and F are strongly 
bisimilar, denoted by E ^ e F, if for all indexed set v of values, E[v/x] ^ p F[v/x]. We usually omit 
the subscripts of ~ c , ~ p and ^ e where no confusion arises. 

In the following, we derive some properties of strong probabilistic bisimulation. The proofs are 
similar to but much simpler than the corresponding results of weak probabilistic bisimulation in the 
next section, so we omit them here. 

Lemma 5.1 If 1Zi,i <E I , is a collection of strong probabilistic bisimulations on Con, then their 
reflexive and transitive closure (UilZi)* is also a strong probabilistic bisimulation. 

Theorem 5.1 ~ c is a strong probabilistic bisimulation on Con. 

Theorem 5.2 For any C,T> e Con, C <~ V if and only if for any s G Act* , 

(1) whenever C A c fx then there exists v such that V A c v and \i =^ v, 

(2) whenever T> A c v then there exists /i such that C A c p and [i =^ v, 

(3) ifC-» and V then Contex(C) — ContexiV). 

Now we turn to prove the congruence property of strong probabilistic bisimilarity. 

Theorem 5.3 If E ~ F then a.E <~ a.F, for any a e {c?x, c!e, c?g, clq, U[q],M[q; x]}. 

Proof. Assume that E and F contain classical variables x at most. For any context C, we need 
to prove that < a.E[v/x];C >^< a.F[v/x];C > for any indexed set v of values. Suppose now 
< a.E[v/x];C >-^> \x. We consider only the case when a = clx and a — M[f;x}; other cases are 
similar. 
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(i) a = clx. Then a = civ and \i =< E[v/x, v/x]; C > for some v € Real. From C-Inp 
rule, we have < a.F[v/x];C >A v = < F[v/x,v/x];C >, and furthermore, < E[v/x,v/x];C >^< 
F[v/x,v/x];C > from the assumption that E <~ F. 

(ii) a = M[f; x], M has the spectral decomposition M — AjPj, and C = "q = p" . Then a = r 
and /x = fflpi* < E[v/x, Xi/x];q = P%,fpP%,f/Pi >i where = TrP iiF p. In this case, we derive from 
Meas rule that 

< a.F[£/x];C >^> Sp,» < F[v/x, Xi/x];q = PufpPi,f/Pi >= v. 
For any M <G Con/ ~, 

A*(M) = K : < Xi/x];q = Pi,fpPi,f/Pi >e M|} 

i 

and 

i/(M) - Pt : < F[v/x,\i/x];q = Pi,rpPi,f/Pi >e M\}. 

i 

Notice that by the assumption i?~Fwe have for any context C, < E[v/x, Xi/x]; C >G M if and 
only if < F[v/x, Xi/x};C >G M. Thus /u(M) = v(M). □ 
For the sake of simplicity, in the following two theorems we only consider quantum processes 
with no free classical variables. The same results can be proven easily to hold for quantum process 
expressions. 

Theorem 5.4 If P ~ Q then P + R - Q + R for any R. 

Proof. We prove this theorem by proving a stronger result: if < Pi'.C >^< Qi]D > for i = 1,2, 
then < Pi + P 2 ]C >~< Qi + Q 2 :D >. 

Suppose < Pi + P 2 ; C >^ p, for some a and p. Then from Sum rule, we have < Pi; C >^ p, or 

< P 2 ; C >-^> yu for some p. By the assumption that < Pf, C >^< Qf, D > we derive < Qi,D >A v 
or < Q 2 ; D >A v for some v such that [i =^ v. Using Sum rule again, we know < Q1 + Q2; C >^> v. 

If < Pi + P 2 ; C >^ then we have < Pi,C >-?*. So we derive that C — D from the assumption 

< Pi;C >~< Qi;D >. □ 

Theorems 5.3 and 5.4 imply that strong probabilistic bisimilarity is preserved by prefix and 
summation combinators. It seems, however, very difficult to show whether it is also preserved 
by parallel combinator || because the inherent non-commutativity of quantum operations and the 
potential entanglement between quantum systems will make the situation very complicated when 
interleaving is allowed between different components of a composite system. Nevertheless, in the 
following we prove a weaker result and put aside the general one for further study. 

We say a quantum process classical if it will never change the context accompanied with it. In 
other words, it is constructed only by the combinators except 4, 5, 7 and 8 in Definition 3.1. 

Lemma 5.2 If R is classical and < R;C >A for some C and a, then < R: D >A< R' D ;D > for 
any context D. Furthermore, R' D is also classical. 

Proof. Direct from definitions. □ 

Theorem 5.5 If P ~ Q then 

(1) P||P~ Q||P for any classical R, 

(2) P[f] ~ Q[f], for any relabeling function f; 
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Proof. We only prove (1); (2) are simpler. Define 



72' = {(< P\\R:C>,< Q\\R;D >) :< P; C >~< Q; D >, and R is classical} 

and 72 = (72' U ~)* the equivalence closure (i.e. the reflexive, symmetric and transitive closure) of 
72'U ~. We prove in the following that 72 is a strong probabilistic bisimulation. 

Suppose (C,T>) G 72. We may assume that (C,T>) G 72.' because the extension to the equivalence 
closure is straightforward. So we can suppose further that C =< P\\R;C > and V =< Q\\R;D > 
for some < P;C >^< Q,D > and R classical. 

(i) If < P\\R;C >A M , there arc three cases to consider. 

Case 1: There exists \i\ such that < P:C >-^> fi\ and 



-. i - <-i;G>), if T — T{\\R 

M (<T,G>)-<j n otherwise. 



By the assumption that < P;C >^< Q;D> and Theorem 5.2, we have < Q;D >^>c v \ an d 
Mi (Mi) = ^i(Mi) for any M x G Con/ ~. Then < Q||.R;£> >^>c v for 

i/(<T-G>) = | ^(< T i'; G >)' ifr = Tf||i2 
^ ' ' [0, otherwise. 

For any M G Con/K, let 

M' = { < T{; G > | < T{\\R; G >G M}. 

From the definition of 72, it is not difficult to check that for any configurations C ~ D, C G M' if 
and only if 2? G M'. So M' is the union of some equivalence classes of Con/ ~, and thus 

u(M) = Mi(M') = ^i(M') = v(M). 

Case 2: There exists transition < R;C >^>< i?', C > and /x =< P||P'; C >. Then from Lemma 
5.2, we know R 1 is also classical and < R; D >A< R', D >. Thus < Q\\R; D >A< Q\\R'; D > and 
< P\\R'; C>K< Q\\R'; D > from the definition of 72,. 

Case 3: a = r, and the action is caused by a (classical or quantum) communication between P 
and R. We assume that 

<P;C> C -5<P';C>, <R-C> C ^<R'-C> 

and /i = < P'||P';C >. Other cases are similar. From the assumption that < P; C >^< Q;D> 
and Theorem 5.2, we have 

<Q;D > c ^ c fflpj* <Qi\D> and for any i ,< P';C >~< Qi;D > . 

On the other hand, from Lemma 5.2 we derive 

<R-D> C ^< R'-D>. 

Thus from Q-Com rule, 

< Q||P;P> >^>c fflpi* < Q 4 ||P';P> >= i/. 

In order to guarantee /x =7^ we need only to prove for any i, (< P'\\R'; C >, < Qi||P'; P >) G 1Z, 
which is direct from the fact that < P'; C >~< Qf, D > and the definition of 72. 

(ii) If < P\\R;C then we have also < P; C >^> . Hence Context(C) = Context(V) from 
the assumption < P; C >^< Q; D >. 
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From (i) and (ii) we know that 1Z is a strong probabilistic bisimulation on Con. Now since 
P ~ Q, we have < P;C >~< Q;C > for any context C. So < P\\R; C ><~< Q||i?; C > for any C 
and hence P\\R~ Q\\R. □ 



Unfortunately, our notion of strong probabilistic bisimilarity (and also the weak probabilistic 
bisimilarity) is not preserved by restriction. An example is as follows. Let U\, U2, Vi, V2 be unitary 
transformations such that U1U2 = V1V2 but U\ 7^ V\, and 

P = C/i[g].c!0.C/ 2 [9].nil, Q = V 1 [q]AQ.V2[q].n\\. 

It is easy to check that P ~ Q but -P\{c} 7^ Q\{c}. 

To conclude this section, we give a simple property of strong probabilistic bisimilarity. 

Theorem 5.6 For any E,F G qPrE, 

(1) E + F ~ F + E, 

(2) E + E~E, 

(3) E+{F + G)~(E + F) + G, 

(4) E + nil ~ E, 

(5) E||nil~.E, 

Proof. Direct from definition. 

6 Weak probabilistic bisimilarity between quantum processes 

As in classical process algebra, the notion of weak probabilistic bisimulation which abstracts from 
unobservable internal actions is more useful in implementation and verification. In this section, we 
present weak probabilistic bisimulation in qCCS. Some definitions are motivated by or borrowed 
directly from [32] and [33] which are designed for classical probabilistic processes. 

6.1 Weak transitions 

The basis of weak probabilistic bisimulation is the notion of weak transitions, which in turn is a 
natural extension of combined transitions allowing internal actions before or after external actions in 
every execution path. To define weak transitions formally, we introduce first the notions of execution 
fragment and adversary. 

Definition 6.1 An execution fragment f = CoaiCi . . . a n C n is a finite sequence of alternating con- 
figurations and actions starting and ending with configurations, such that for each i = 0, . . . , n — 1, 
there exists a combined transition Ci ^ c Mi+i with /ii+i(Ci+i) > 0. We call n the length of f and 
denote by head(f) and tail(f) the first and the last configurations of f respectively. The set of all 
execution fragments is denoted by frag. 

For any execution fragment /, we denote by Pre(f) the set of execution fragments which are 
prefixes of /. 

Definition 6.2 An adversary A is a function from fragments to the set of finite-support distributions 
over combined transitions, i.e. 

A : frag -> D(^ c ) 

such that for any f e frag, if A(f) = S ie ipi • (Cj,aj,//j) then on are distinct, and d = tail(f) for 
any i £ I. 
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Intuitively, an adversary provides a mechanics to resolve nondeterminism by deciding next transi- 
tion from the execution history when nondeterministic choices have to be made. The next definition 
describes the situation where an execution fragment can be obtained according to an adversary. 

Definition 6.3 Suppose f = Cq^i^i ■ • • a n C n is an execution fragment and A an adversary such 
that A(C aiCi . . . afii) = Sj eJ pj • (Ci,f3j,fij) for i = 0, . . . , n — 1. We say that f coincides with A 
if for any i = 0, . . . , n — 1, there exists ji G J such that [3j i = ojj+i and (Cj+i) > 0. 

We denote by P\{f) — Pj i ^ij i {Ci+\) the probability of the i-th choice in f according to the 
adversary A. 

Note that in the above definition, the required ji is, if exists, unique from the fact that all [3j are 
distinct by Definition 6.2. So the notion P\ is well-defined. 

For any adversary A, we denote by F^^ the set of execution fragments with head C and tail V 
which coincide with A. If / = Cq^iCi • • • a rfin G F^ v , we write 



PA(f) = \{P\{f) 



i=0 

the probability of the execution fragment / according to A. When / does not coincide with A, we 
simply let P A (f) = 0. 

With the above definitions, we are now ready to define the notion of weak transitions. 

Definition 6.4 For any C G Con, s = a\ . . .a n G Act* , and [i G D(Con), we say that C can evolve 
into fi by a weak s-transition, denoted by C ^ [i, if there exists an adversary A such that for any 
V G Supp(fi), 

(1) E/e^ PaU) = MP), 

(2) for any f = Cq{5\C\ . . . [3 m C m G F^ v , the string [3i . . . (3 m has the form T*aiT* . . . T*a n r* . 

In the following, we prove some lemmas which are useful for the next subsection. The first lemma 
shows that any convex-combination of weak s-transitions is also a weak s-transition. 

Lemma 6.1 Suppose C ^ [i\ and C A ^ 2 for some s G Act* . Let p G (0, 1]. Then C ^ \i where 

fj, = pm + (1 -p)im. 

Proof. Suppose an adversary corresponding to C ^> /i, is A%, i = 1,2. We construct a new adversary 
A, which will be proven to be a corresponding adversary of C ^> fi, as follows. For any / G frag, 



A!) 



pAi(f) + (1 -p)A 2 (f) otherwise. 



Note that Pa{C) = 1 for any adversary A and C G Con, and is dependent only on the set 

{A(f') : /' G Pre(f), f ^ /}. The above definition is meaningful and is an inductive one. Now 
we show that for any / G frag with head(f) = C, 



PA(f)=pPMf) + (l-P)PA 2 (f) (5) 



by induction on the structure of /. 
When f = C, we have 



Pa(C) = 1 = v + (i - P) = pPa, (C) + (1 - p)P A2 (C). 
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Now suppose Eq.(5) holds for / = Ca\C\ . . . a n C n . Then for /' = Ca\C\ . . . a n+ \C n+ \, there are two 
cases to consider. 

Case 1. P A (f) = 0. Then from Eq.(5) we also find that P Al (f) = ^U 2 (/) = 0. So we have 
PaW) = P A, (/') = Pa, (/') = 0, and Eq.(5) holds trivially for /'. 
Case 2. P A (f) 7^ 0. In this case, we derive that 

PaW) = PA(.f)P2(.f) Definition 
= PA{f)[^^-PW') + ^- P -^y)PW)\ Eq.(4) 

= pPaADpW) + (PaU) - pPa, (f))P A 2 (/') 

= pPA 1 U)PA 1 U') + i l -P) P Mif)PW) Eq.(5) 

= pP Al (f) + (l-p)P A2 (f). Definition 

So for any V G Supp(fi), 

E Pa(/) = E [p^(/) + (l-p)^ 2 (/)] 

= p E PMf) + (i-p) E 

= p/ii(X>) + (l-p)/i 2 (X>) 
Here in the second equation, we have used the fact that 

jpA p-^i I I 

^C^U — r C^V u r C^V 

which is direct from the definition equation (4), and the assumption that Pa(J) = when / does 
not coincide with A. 

Furthermore, it is easy to check that the second condition in Definition 6.4 holds. So we have 
that Cm/i, □ 

Corollary 6.1 For any fa, . . . , fx n G D(Con) and pi, . . . ,p n G (0, 1] such that C ^ fa and X^Pi = 
1, we have C > fi for fi = ^2iPifa- 

Proof. Direct from Lemma 6.1. □ 

Lemma 6.2 Let C ^> fa s = a\ . . . a n G Act*, and a corresponding adversary be A. Suppose 
A(C) = S ieI pi • (C, /3i, fa). Then for any i G I, 

(1) j3i = T or ai, 

(2) for any Ci G Supp(fa), there exists Ha such that Ci ^> /ic ; and /3,Sj = s, 

(3) H = EieiEcteSuppi^PiViid)^- 

Proof. (1) is obvious. To prove (2), for any d G Supp(fa), let fan G D(Con) such that for any 
V G Con, 

Hd(P) = V{| ^(/) : / e and C0& G Pre(/) |}. 

Pifa[}^i ) 

Let Sj = s or «2 . . . a n depending on whether /3, = r or ai. Then /JjSj = s. We now turn to prove 
that Ci ^> by constructing a corresponding adversary Aa as follows. For any / G frag, let 

" A{C(3if) if = C u 



A(f) otherwise. 
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It is easy to check that for any / e frag, if head(f) = Ci then PiiJ,i(Ci)P_A c (/) = P^(C0if)- So we 
have for any V £ Supp(/j,c t ), 

= ^tVt Eil W) : /' e ^ and c & c * e Pre (/') l> 

Finally, to prove (3) we need only to check that for any V e Con, 

= £ P A (j) 

= E E Eil P ^f) ■■ f e itf-p and C&Cj G Pre(/) |} 

= E E PilHityncAV). 

iei c z eSup P (nt) 

□ 

To illustrate the definitions and lemmas in this subsection, we present a simple example as 
follows. 

Example 6.1 Let M ,i = 0j0> <0j + 1|1)(1| and M+_ = 0|+)(+| + l|-)(-| be two measurements 
according to different bases, where |±) = (|0) ± \l))/y/2. Let / be the identity transformation and 
U be a unitary transformation such that 

U\0) = \+), U\l) = \-). 

Suppose 

P = M 0il [q;x].U[q].c\q.nil + M + -[q;x].I[q].c\q.nil 

is a quantum process which can either perform the measurement according to the {+,— } basis 
on qubit q, or apply sequently the measurement according to computational basis and the unitary 
transformation U on q, and then output q. Now consider the configuration 

C=<P;q=\+)(+\ > . 

The following are two c!g-weak transitions from configuration C: 




c\q -. -J 

Figure 1 : The derivation tree of weak transition C 5 • ^5 EB 5 • Ce 
with a corresponding adversary .4i such that 
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Ai(C) = (C,r,i.Ciffli.C 2 ), Ai(CtCi) = (Ci,t,C 3 ), 

and 

c!q 

Figure 2: The derivation tree of weak transition C <—* C5 

with a corresponding adversary A2 such that 

^ 2 (C) = (C,r,C 7 ), .4 2 (CtC 7 ) = (C 7 ,r,C 3 ), 

where 

d =< E%].c!g.nil;g=|0><0| >, C 2 =< U[q].dq. nil; q = |1)(1| >, 
C 3 =< dg.nii;,? = |+)(+| >, C 4 =< c!g.nil;g = |-)(-| >, 

C 5 =< nil; 9 = l+X+l >, C 6 =< nil; 9 = |-)(-| >, 

C 7 =</[<?]. dg.nii; g = |+)(+| > . 

Now taking combination of these two transitions, we derive a new weak transition from C as 
follows: 




clq o . 

Figure 3: The derivation tree of weak transition C <—> f • C5 ffl j • Cg 
and the corresponding adversary derived using Eq. (4) is A such that 

A(C) = ^A 1 (C) + ^A 2 (C) = (C,T,^»C 1 m^*C 2 + ^»C 7 ), 

AiCrd) = A 1 (CtC 1 ) = (C 1 ,t,C 3 ), ■■■■ 

□ 

6.2 Weak probabilistic bisimulation 

From the notions defined in the previous subsection, we can define our weak probabilistic bisimulation 
between quantum configurations as follows. 

Definition 6.5 An equivalence relation 1Z C Con x Con is a weak probabilistic bisimulation if for 
any C,T> <G Con, (C,V) e 1Z implies that 

(1) whenever C —> /i for some a G Act, there exists v such that T> <^-> v and n = K v , 

(2) if C -/» and V then Contex(C) = Contex(T>). 
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The following two lemmas show that the ordinary transition in Clause (1) of the above definition 
can be strengthened to combined transition and even weak transition. 

Lemma 6.3 Let 71 C Con x Con be a weak probabilistic bisimulation and (C,T>) £ TZ. Then for 
any a £ Act, if C ^>c M; then V A v for some v such that fi =n v. 

Proof. Suppose C ^>c M- By definition there exist fi\,...,fi n £ D(Con) and pi, . . . ,p n £ (0,1], 

J2iPi = 1> sucn tnat C yUi and /z = J^iPiPi- From the assumption that C1ZV, we have V ^ Vi for 

some i/i, . . . ,f„ such that [i% =k z/j for any i. Let zv = X^fW- Then we have /i =^ v and D Ay 
from Corollary 6.1. □ 

Lemma 6.4 Lei 71 C Con x Con &e a weafc probabilistic bisimulation and (C,T>) £ 71. Then for 
any s £ Act* , ifC^p, then D^i/ /or some v such that jj, =n v. 

Proof. Suppose an adversary corresponding to C /j, is A. We prove the lemma by induction on 
the maximal length h of the execution fragments in ^veSupp(p)Fc'-*v- 

If h = 0, then we have s = e and fi = C. In this case, we need only to take v — V. 

Suppose the result holds for h < n. We now prove that it also holds for h = n + 1. Let 
A(C) = ffljg/pi • [C, on, Hi). Then for each i £ I we have C — »c Hi, arid from Lemma 6.3 there exists 

Vi such that D 4 i/ ; and /Ltj =k i/j. Furthermore, from Lemma 6.2 we have for any Cj S Supp(m), 
there exists ^ such that Cj ^> ^c i; ftsi = s, and 



Now take arbitrarily Vi £ Supp{ui). Let \Vf\n denote the equivalence class of 71 which includes 

Vi. For any Cj £ Supp(ni) n [L^k, we can choose an adversary Ad corresponding to Ci ^> u Ci such 

■Ac 

that the maximal length of the execution fragments in Ux>eSu PP (iJ, c .)F c . ^ v is less than n + 1. So 





iei CieSupp(fj,i) 



by induction we have Vi A v^g, for some v%}., and pa =n "p.- Now from Corollary 6.1 we have 




It is now direct to check that V <— > i/ for 



^ = 



iei VieSupp(vi) 
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Finally, we show « =jz v. For any M G Con/TZ, 



v{M) = E E pM^i)^i(M) 
iei T>ieSupp(vi) 

- E E E ft( 5»;£n^ lK) 

i€J deSupp(ni) ■Di&Supp(u i )n[Ci]fi rK rr\rx) l ni-cj 

= E E ^(^w^fer 

= E E pMCi)n Ci (M) 

iei CieSupp(m) 
= KM). 

Here the third equation is due to the fact that u c . =tc v< £ for any Dj G Supp(yi) and C, G 
Supp(ni) n [2?i]-&; while the fourth equation holds because fii =n Ui for any i £ I. □ 

Lemma 6.5 Let 1Z C Con x Con &e a weafc probabilistic bisimulation and (C,T>) G 7\L. 
^ 7/C -/» £/ien I? -S» /or any a G Act — {r}. 

(2) For any s G Act* , if C ^> /i such that C for some C G Supp(fi), then there exists v such 
that V v and V for some V G Supp(v). Furthermore, Contex{C) = Context{V). 

Proof. (1) is easy. To prove (2), from C /i we first have some v\ such that T> v\ such that 
« =tc v i- If there exists a T>\ G Supp{vx) n [C]tc such that Pi -/» then we have done. Otherwise, 
for any T>\ G Supp(v\) n [C']tj, from C and (1) we have 2?i v 2 for some f 2 and C"RT> 2 for 
any 2? 2 € Supp(v 2 ). Then we check if there exists a D 2 G Supp(v 2 ) such that 7J> 2 " v> - Note that 
the quantum processes we consider in this paper are all finitely derivable. It follows that we will 

finally reach a distribution v such that V v such that C'TZV and V for some V G Supp{v). 
Furthermore, from Definition 6.5 (2) we have Context(C) — Context(V). □ 

Since the union of equivalence relations is not necessarily an equivalence relation, the union of 
weak probabilistic bisimulations is not necessarily a weak probabilistic bisimulation either. Neverthe- 
less, we can prove the reflexive and transitive closure of the union of weak probabilistic bisimulations 
is also a weak probabilistic bisimulation. The technique used in the proof is from [12]. 

Theorem 6.1 IflZi,i £ I, is a collection of weak probabilistic bisimulations on Con, then their 
reflexive and transitive closure (UilZi)* is also a weak probabilistic bisimulation. 

Proof. By definition, IZi is symmetric for any i G I. So (Uj7£j)* is also symmetric and hence 
an equivalence relation. Now suppose (C,T>) G (UiRi)* . Then there are integer n and a series 
of configurations Co,...,C n such that Co = C, C n = V, and (Cj,Cj + i) G TZ^ for some fcj G I, 
i = 0,. . . ,n — 1. There are two cases we should consider: 

(1) CA(i for some a G Act. Then from ClZk Ci we know that there exists \x\ such that C\ ^> p\ 
and /xo(Mo) = pi(M^) for any Mo G Con/lZk - Furthermore, from C\R.k x C 2 and Lemma 6.4, we 

have C 2 ^> \i 2 for some fi 2 , and \i\[M\) = n 2 (Mi) for any Mi G Con/TZk 1 ■ In this way, we can derive 

that d + i ^> for some /Xj+i, and /Uj(Mj) = u i+1 (Mj) for any Mj G Con/Uki, i = 0, . . . ,n — 1. 



22 



Now suppose M £ Con/(UilZi)* . Notice that for any i = 0, . . . ,n — 1, M is the disjoint union 
of some equivalence classes of Con/IZ^. It follows that pi(M) = p, i+ i(M) for any i = 0, . . . , n — 1. 
Thus we have /U (M) = /U„(M). 

(2) C -/». Then from C1Zk C\ and Lemma 6.5 we have Ci <^-» /ii, X>i -/» for some V\ £ Supp{pL\), 

and Contea;(C) = Context(T>i). Similarly, we can derive that for any i = 2, . . . , n, we have Ci ^> /i.;, 
2?i and C 'ontex(V 'i-i) = Context(T>i) for some T>i £ Supp(pi),. Finally, since T> we find it is 
the only case that V n — V and so ContextiV) — Context(D n _i) = ■ ■ ■ = Context{C). 

From (1) and (2), we know that (Uj7?.j)* is also a weak probabilistic bisimulation. □ 

Definition 6.6 Two configurations C and V are weakly bisimilar, denoted by C ~ c V, if there is a 
weak probabilistic bisimulation relation 1Z such that (C,T>) £ TZ. For any P,Q £ qProc, P and Q are 
weakly bisimilar, denoted by P f» p Q, if < P;C >« c < Q;C > for any context C. Suppose process 
expressions E and F contain classical variables x at most. Then E and F are weakly bisimilar, 
denoted by E w e F, if for all indexed set v of values, E[v/x] ~ p F[v/x]. 

From Theorem 6.1, we find that the weak bisimilarity relation « c is also a weak probabilistic 
bisimulation; it is in fact the largest weak probabilistic bisimulation on Con. 

Corollary 6.2 ss c is a weak probabilistic bisimulation on Con. 

Proof. By definition, we have 

~ c = [J{7£ : 71 is a weak probabilistic bisimulation on Con}. 

From Theorem 6.1, the reflexive and transitive closure «* is also a weak probabilistic bisimulation 
and hence «*C« C . On the other hand, we have obviously « C C«*. So « c =«* is also a weak 
probabilistic bisimulation on Con. □ 

In the following, we usually omit the subscripts of m c , w p , and « e where no confusion arises. 

Definition 6.7 A relation on Con is defined such that C ~' V if for any s £ Act* , 

(1) whenever C ^> p then there exists v such that V A v and p =~ v, 

(2) whenever V A v then there exists p such that C ^ p and p =~ v, 

(3) ifC-» and V then Contex(C) — ContexiV). 

Lemma 6.6 is a weak probabilistic bisimulation on Con. 

Proof. First, it is direct that ~' is an equivalence relation. Furthermore, from Lemma 6.4 and 
Theorem 6.1, we have «C«'. Thus for any M £ Con/ M is the disjoint union of some equiv- 
alence classes of Con/ rs. From these fact, we can easily prove that «' is also a weak probabilistic 
bisimulation on Con. □ 

From Lemma 6.6, we have ss'C« and then We reexpress this result explicitly as the 

following theorem. 

Theorem 6.2 For any C,V £ Con, C ~ V if and only if for any s £ Act* , 

(1) whenever C ^ p then there exists v such that Pmj/ and pi =~ v, 

(2) whenever T> ^ v then there exists pi such that C pL and p =~ v, 

(3) ifC-» and V then Contex(C) — ContexiV). 

Now we turn to prove some congruence properties of weak probabilistic bisimilarity. 
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Theorem 6.3 (1) If E w F then a.E w o.F, /or any a e {c?x, c!e, c?q, c!g, ?7[g], M[q; x}}. 
(2) IfEfvFandG is classical, then E\\G w 
(3j If E fa F and f is a relabeling function, then E[f] fa F[f]. 

Proof. Similar to the case for strong probabilistic bisimilarity. □ 

As in classical process algebra, ss is not preserved by summation +. To deal with it, we introduce 
the notion of equality. 

Definition 6.8 Two configurations C and T> are equal, denoted by C ~T>, if for any a £ Act, 

(1) whenever C A /i then there exists v such that T> v and /i =~ v, 

(2) whenever V A v then there exists /j, such that C ^* fi and fi =~ v, 

(3) ifC-» and V then Contex(C) = ContexiV). 

a. 

The only difference between the definitions of « and ~ is that in the latter T> v is replaced 
by T> <^-> v, i.e., the matching action for a r-move has to be a real r-move. 

Furthermore, we extend the definition of equality to the case of quantum process and process 
expressions as follows. For any P,Q € qProc, P ~ Q if < P;C >~< Q;C > for any context C; while 
for any E,F <G qPrE which contain free classical variables x at most, E ~ F if E[v/x] ~ F[v/x] for 
any indexed set v of values. 

Lemma 6.7 For any E,F £ qPrE, E ~ F if and only ifE + GfaF + G for all G £ qPrE. 

Proof. Similar to Milner [25] Proposition 7.3. □ 

The following theorem shows that the quality relation is preserved by all the operators in our 
language except restriction. 

Theorem 6.4 If E ~ F then 

(1) a.E ~ a.F, for any a £ {c!x, c!e, c?g, c!g, U[q], M[q; x]}, 

(2) E + G ~ F + G, for any G GqPrE, 

(3) E\\G ~ F\\G, for any classical G, 

(4) E[f] ~ F[f], for any relabeling function f. 

Proof. (2) is from Lemma 6.7. Others are similar to the proofs of corresponding results about ~. 

7 Conclusions and further work 

In this paper, we propose a framework qCCS for modeling and reasoning about the behavior of 
quantum concurrent systems. This framework is a natural extension of classical value-passing CCS 
with the input and output of quantum states, and unitary transformations and measurements on 
quantum systems. To make qCCS consistent with the laws of quantum mechanics, many syntactical 
restrictions on valid quantum process expressions are introduced, which make our syntax of qCCS 
more complicated than the ones proposed in literature. The operational semantics of qCCS is 
introduced based on probabilistic labeled transition system. This semantics has many different 
features compared with the proposals in literature in order to describe input and output of quantum 
systems which are potentially correlated with other components. We also adopt the way to express 
the probabilities raised by quantum measurements by the resulted distributions instead of by the 
transition relation itself (by introducing probabilistic transitions, as done in [20] and [11]). Based 
on this operational semantics, we define the notions of strong/weak probabilistic bisimilarity and 
equality between quantum processes and discuss some properties such as congruence under various 
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combinators introduced in this paper. The congruence property we proved for parallel combinator 
is, however, a weak one in which the common process is classical and never changes the accompanied 
quantum context. So a direction for further research is to investigate the general case when fully 
quantum processes are considered. 

Recursive definitions are very useful in modeling infinite behavior of processes, and the uniqueness 
of recursion equations in the sense of strong bisimilarity and equality provides us with a powerful 
tool for reasoning about correctness of implementations with respect to specifications in various 
process algebras, including CCS [25], 7r-calculus [23] and higher-order process calculi [31, 36, 37, 
44]. However, there are some technical difficulties to introduce the constructor of recursion in the 
quantum setting. The main reason is that it is difficult to define the notion of free quantum variables 
for recursively defined process expressions. For example, if we allow the process expression defined 

by 

A = dq.A (6) 

to be valid, then some problem will occur when we attempt to assign free quantum variables to A: 
on one hand, from Definition 3.1 6, to make dq.A meaningful we must have q £ qv(A); on the other 
hand, also from Definition 3.1 6, we know q e qv{dq.A). This is a contradiction because we will 
naturally require qv(d.q.A) C qv(A) in definition equation (6). However, the difficulty will not exist 
in the following recursively defined quantum process 

A = clq.U[q].dq.A (7) 

which consequently inputs a qubit through quantum channel c, applies a predefined unitary trans- 
formation on it, and outputs it through c. Here we can freely let qv(A) = 0. 

In order to provide some useful mathematical tools for describing approximate correctness and 
evolution of concurrent systems, one of the authors [39] has tried to develop topology in process 
algebras. In particular, he and Wirsing [45] introduced the notions of A-bisimulation and approxi- 
mate bisimilarity in CCS equipped with a metric on its set of action names, and further applied to 
probabilistic processes [40]. So an interesting question is to see whether these notions can be also 
extended to the quantum setting. 

Another direction worthy of future investigations is the relation between the expressibility of our 
qCCS and that of quantum A-calculus presented in [38] . Recall that Milner has proven that classical 
CCS is equivalent to A-calculus in the sense that any one of them can be induced to another. It is 
interesting to examine whether qCCS presented in this paper and quantum A-calculus also enjoy a 
similar property. 
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